Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e75fc4fe-a438-3983-8921-8d41a065f0a0.roa
File: e75fc4fe-a438-3983-8921-8d41a065f0a0.roa (raw, json)
Hash identifier: Id7XD0nFKJ2AWgWXEFlCBiIo2Fx/IhrcEm2V5EsfqPA=
Subject key identifier: B8:2E:37:FF:E3:02:B9:C4:B9:A6:B9:C1:35:1B:87:9A:87:18:7D:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F01FF62C08167A279EDCF5C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e75fc4fe-a438-3983-8921-8d41a065f0a0.roa
Signing time: Tue 23 Aug 2022 12:00:00 +0000
ROA not before: Tue 23 Aug 2022 12:00:00 +0000
ROA not after: Wed 28 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:01:ff:62:c0:81:67:a2:79:ed:cf:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 23 12:00:00 2022 GMT
Not After : Sep 28 04:00:00 2022 GMT
Subject: CN=6a9f7c25-4c59-40f8-bf53-855137f3d002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:a9:f1:6d:e9:a0:81:89:79:3f:ab:ed:37:
eb:8a:6f:7e:a4:2c:83:db:d2:25:32:73:c9:5f:0f:
64:1d:9b:3e:6e:93:6e:45:63:6c:ae:0d:71:74:2a:
9f:a8:fc:f4:ab:1d:3d:25:c8:f0:88:8b:3e:f2:92:
74:ed:9c:a4:a4:1c:4d:a4:f2:f7:97:c5:49:c3:ba:
90:9b:a7:f4:58:3a:41:69:b7:45:79:c2:5c:65:db:
77:94:4d:0d:c5:56:7f:cf:2e:fc:01:14:5a:e7:ee:
90:b2:11:77:2a:b9:5d:53:2e:23:d6:7b:21:f1:c2:
76:ce:68:a9:85:85:4b:d6:5c:97:48:a4:d8:8c:cc:
30:14:f3:1e:a1:37:ef:a0:78:50:5e:a7:0d:0e:d3:
e5:9c:e5:00:f8:11:8c:d9:61:6b:6c:a9:8c:c1:e3:
64:c5:a4:9d:0e:d5:a1:6a:54:c1:be:4f:d7:c0:44:
d0:cf:09:b6:0c:e9:cb:a0:bd:99:32:9e:09:c6:b9:
51:0d:f1:99:50:1b:c6:03:4a:3e:48:2d:42:80:c9:
7c:e2:ac:b6:db:3c:e1:aa:23:46:df:c2:93:dd:e3:
5a:73:19:48:ef:81:1d:b0:e2:71:13:f8:82:28:25:
04:5f:94:0b:5a:7a:1b:ef:0e:7d:f0:19:f0:d7:44:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:37:FF:E3:02:B9:C4:B9:A6:B9:C1:35:1B:87:9A:87:18:7D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e75fc4fe-a438-3983-8921-8d41a065f0a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:e6:03:f7:37:7f:7d:48:ad:e6:0b:12:1c:a5:4a:24:6e:45:
06:8d:6c:44:21:80:0c:e4:cc:da:0f:6c:9f:7c:b8:e5:c8:6c:
9f:77:7d:34:fe:20:de:69:1c:20:ce:30:48:bc:f4:53:4a:3a:
92:cf:78:62:9e:b3:3c:90:aa:17:8a:55:f8:de:6c:df:d1:7f:
80:90:81:30:65:a4:ac:61:40:be:b2:5a:d2:0b:54:80:bf:bf:
f3:2e:0e:0b:81:9c:67:0c:e7:94:3e:b0:58:06:f6:7a:5a:2b:
28:a1:74:52:47:18:75:d0:ed:03:69:13:1d:e0:9c:ef:aa:a1:
30:88:c0:5c:63:05:5e:1a:1c:8e:fe:6d:12:60:09:ab:d3:37:
6d:4b:7a:29:dc:96:6d:ac:23:0c:38:13:4d:ab:4f:30:47:ef:
0f:58:70:da:4c:aa:b9:24:4e:ff:b7:56:0f:fe:70:8c:a5:50:
c9:67:8a:0b:75:10:13:35:6f:cd:00:ad:ab:2f:a2:e6:25:2b:
a3:5a:b0:89:d4:5a:cb:83:e1:95:28:8d:41:ca:da:35:75:23:
9e:9e:cf:e9:a7:15:98:52:a8:66:c4:6b:d7:67:4f:9c:85:e4:
5c:ae:07:68:7d:73:9c:e6:8e:9e:68:11:84:cf:12:ce:af:6f:
1a:13:83:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8B/2LAgWeiee3PXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyMzEyMDAwMFoXDTIyMDkyODA0MDAwMFowLzEtMCsGA1UEAxMk
NmE5ZjdjMjUtNGM1OS00MGY4LWJmNTMtODU1MTM3ZjNkMDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHap8W3poIGJeT+r7Tfrim9+pCyD29IlMnPJ
Xw9kHZs+bpNuRWNsrg1xdCqfqPz0qx09JcjwiIs+8pJ07ZykpBxNpPL3l8VJw7qQ
m6f0WDpBabdFecJcZdt3lE0NxVZ/zy78ARRa5+6QshF3KrldUy4j1nsh8cJ2zmip
hYVL1lyXSKTYjMwwFPMeoTfvoHhQXqcNDtPlnOUA+BGM2WFrbKmMweNkxaSdDtWh
alTBvk/XwETQzwm2DOnLoL2ZMp4JxrlRDfGZUBvGA0o+SC1CgMl84qy22zzhqiNG
38KT3eNacxlI74EdsOJxE/iCKCUEX5QLWnob7w598Bnw10QgCwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLguN//jArnEuaa5wTUbh5qHGH3zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTc1ZmM0ZmUtYTQzOC0z
OTgzLTg5MjEtOGQ0MWEwNjVmMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDegwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYOYD9zd/fUit5gsSHKVKJG5FBo1sRCGADOTM2g9sn3y45chsn3d9NP4g
3mkcIM4wSLz0U0o6ks94Yp6zPJCqF4pV+N5s39F/gJCBMGWkrGFAvrJa0gtUgL+/
8y4OC4GcZwznlD6wWAb2elorKKF0UkcYddDtA2kTHeCc76qhMIjAXGMFXhocjv5t
EmAJq9M3bUt6KdyWbawjDDgTTatPMEfvD1hw2kyquSRO/7dWD/5wjKVQyWeKC3UQ
EzVvzQCtqy+i5iUro1qwidRay4PhlSiNQcraNXUjnp7P6acVmFKoZsRr12dPnIXk
XK4HaH1znOaOnmgRhM8Szq9vGhODdw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:32:01 2025 by rpki-client